Enterprise HIPAA healthcare analytics platform on GCP with multi-region active-passive architecture spanning us-central1 primary and us-east1 DR, featuring Shared VPC, GKE Autopilot clusters, Cloud Healthcare API (HL7v2 and FHIR stores), and end-to-end security controls including VPC Service Controls, Cloud Armor WAF, Workload Identity Federation, and CMEK encryption. Data flows from hospital EHR systems through Apigee API Gateway and Cloud Load Balancing into private GKE namespaces for HL7 parsing, FHIR validation, and de-identification, then into BigQuery datasets with policy tags and 7-year retention for analytics. Security architecture enforces least-privilege access via IAP for workforce users, Organization Policies, Cloud KMS key management, immutable Cloud Audit Logs, and Event Threat Detection across the organization hierarchy. Fork this diagram on Diagrams.so to customize for your healthcare organization's multi-region strategy, compliance requirements, or failover topology. The design demonstrates production-grade HIPAA controls: private GKE nodes, deny-by-default NetworkPolicies, Pod Security Standards, Workload Identity for service-to-service auth, and segregated security/audit/production projects with centralized monitoring and alerting.